Privacy Policy
Last updated: May 18, 2026. Effective from May 18, 2026, 11:00 CEST.
1. Controller information
Race Online Hungary Kft., 5000 Szolnok, Csokonai utca 22., Hungary, acts as data controller for personal data collected through raceonlinehungary.net and related Race Online Hungary online forms, event pages, registration pages and services, unless a separate notice states otherwise.
General privacy contact: support@raceonlinehungary.net. Event and competition related contact: racecontrol@raceonlinehungary.net.
2. Scope of this policy
This Privacy Policy applies to the Race Online Hungary website, contact forms, competition and pre-qualification registrations, community and sim racing event administration, email communications, technical logs, cookie preferences and related online services operated under the Race Online Hungary brand.
Individual events, partner projects or registration forms may contain additional event-specific privacy wording. Such event-specific information supplements this policy for that particular event, for example where participants are invited to a live venue, placed into sessions, contacted about host details or listed in timing and ranking outputs.
3. Categories of personal data we may process
- Identity and contact data: name, racing name, display name, email address and message content.
- Gaming and competition identifiers: EA ID, platform ID, PSN ID, Xbox ID, Steam or similar platform identifiers where requested for the event.
- Registration data: selected session, platform, short introduction, acceptance of rules, telemetry or technical confirmations, registration timestamp and registration status.
- Competition administration data: session allocation, attendance, host friend confirmation status, results, rankings, lap or sector information where relevant to the event.
- Website and security data: IP address, user agent, request time, visited URL, error logs, abuse prevention logs and cookie consent preferences.
- Communication data: emails sent by us, delivery status, support requests and event-related notices.
- Media and live event data, where applicable: photos, video, livestream footage, voice, gameplay, scoreboard or public result display captured at or in connection with an event.
4. Purposes and legal bases
- Website operation, security, troubleshooting and abuse prevention: legitimate interest and legal obligations where applicable.
- Responding to contact requests and support messages: steps requested by the user before entering into a service relationship and legitimate interest.
- Managing registrations, session allocation, competition administration, eligibility checks and event communication: performance of a requested service, legitimate interest and, where the form expressly asks for it, consent.
- Sending confirmations, host information, technical instructions, rule updates and practical event notices: performance of the requested registration and legitimate interest.
- Inviting registered participants to a related live event, confirming attendance and sharing venue or schedule information: legitimate interest connected to the specific event and the participant's registration.
- Publishing rankings, results, session information, timing data or public event displays: legitimate interest in running and documenting a competition, and participant expectations in a competitive event.
- Optional marketing communications not directly connected to the requested event: consent or another applicable legal basis stated at the time of collection.
- Compliance with legal, accounting, tax, security or authority requirements: legal obligation and legitimate interest.
5. Event registrations and live event invitations
If you register for a pre-qualification, tournament, league, community race or partner event, your data may be used to identify you, place you into sessions, verify game and platform identifiers, contact you about rules and technical requirements, send confirmations and coordinate participation.
Until the connected live event is completed, registered participants may be contacted about invitation, attendance, venue information, schedule, technical requirements, host details and other practical matters directly linked to that event. This does not automatically subscribe you to a general newsletter.
6. Cookies and local browser storage
We use essential cookies and local browser storage where required for secure operation, session handling, form protection, cookie preference storage and basic website functionality. If optional cookies, analytics or marketing tools are introduced, they will be handled through the relevant cookie consent settings or an equivalent notice.
Cookie preferences can be changed through the cookie settings link on the main website, where available.
7. Recipients and processors
Personal data is accessed only by persons who need it for website operation, support, competition administration, event organisation or legal compliance. Depending on the service, recipients or processors may include hosting providers, email providers, IT maintenance providers, event staff, race control staff, timing or ranking operators and professional advisers.
Event partners, venues or sponsors receive personal data only where this is necessary for the specific event, clearly expected from the registration process, required by law or covered by a separate notice or consent. We do not sell personal data.
8. International transfers
We aim to use service providers located in the European Economic Area whenever practical. If a provider or technical service involves a transfer outside the EEA, we rely on an appropriate GDPR transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another safeguard available under Chapter V of the GDPR.
9. Retention periods
- Contact requests are kept for the time needed to answer and follow up the request, normally up to 24 months unless a longer period is justified.
- Competition and event registration records are kept until the event and related administration are completed, then normally up to 12 months for dispute handling, audit, abuse prevention and documentation purposes.
- Published results, rankings and event documentation may remain available as part of competition history, unless removal is required by law or justified by an individual request.
- Technical logs are normally kept for a limited security and troubleshooting period, usually up to 90 days, unless longer retention is needed for investigation or legal protection.
- Cookie consent preferences are kept until they expire, are changed by you or are reset by the browser.
- Accounting, contractual or legal records are kept for the period required by applicable law.
10. Security
We apply technical and organisational measures appropriate to the nature of the data and the risk, including access limitation, server-side security measures, encrypted transport where available, backups, logging and operational controls. No online system can be guaranteed to be completely risk-free, but we take reasonable steps to protect personal data against unauthorised access, loss, misuse or alteration.
11. Children and minors
Our competitions and services are intended for users who are eligible to participate under the relevant event rules and platform requirements. If an event is open to minors, additional conditions, parental permission or organiser checks may apply. If you believe that a child has provided personal data without appropriate permission, contact us so we can review the situation.
12. Automated decisions
We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for users. Some forms may use automated validation, anti-spam checks or duplicate detection to protect the service and ensure fair administration, but important competition or administrative decisions can be reviewed by the organisers.
13. Your GDPR rights
Subject to the conditions and limits of the GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, objection to processing based on legitimate interest and withdrawal of consent where processing is based on consent.
You may also object to direct marketing at any time. If you withdraw consent, this does not affect processing carried out before the withdrawal or processing that remains lawful on another legal basis.
14. How to exercise your rights
Send your request to support@raceonlinehungary.net. For event-specific requests, you may also contact racecontrol@raceonlinehungary.net. We may ask for information needed to identify you and protect the data of others.
We aim to respond within the deadline required by the GDPR. If a request is complex or numerous, the response period may be extended as permitted by law.
15. Supervisory authority
If you believe that the processing of your personal data infringes applicable data protection law, you may contact the competent supervisory authority. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH).
- NAIH website: https://www.naih.hu/
16. Updates to this policy
We may update this Privacy Policy when our services, event structure, legal requirements or technical setup changes. The current version is published on this page. Material event-specific information may also be provided on the relevant registration page or in direct event communications.